Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8dfb7811-cc82-34ed-a196-4adb3dce261c.roa
File:                     8dfb7811-cc82-34ed-a196-4adb3dce261c.roa (raw, json)
Hash identifier:          TOyKS1iAMQIdfeFKnFk5AaAaRBBmrV0s/+vVtwpqNPc=
Subject key identifier:   05:7A:61:10:63:33:AC:32:9B:C0:22:F6:10:52:A8:5C:7F:19:02:4E
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584D571FB5884729C98720F80500
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8dfb7811-cc82-34ed-a196-4adb3dce261c.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     27411
IP address blocks:        23.19.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b5:88:47:29:c9:87:20:f8:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=f2f73e7c-05db-4998-8717-63ca4825b0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:d0:e1:24:63:dd:70:90:50:b7:2e:88:06:
                    ba:5b:75:b5:28:ef:17:09:45:a6:02:9a:f0:28:23:
                    7d:3f:0f:f4:b4:40:4c:57:f3:72:ef:c6:39:bd:03:
                    3a:76:86:63:73:53:ea:fc:a1:d6:cf:37:a1:0f:94:
                    cd:e0:7b:9f:7c:f9:71:3e:17:fd:84:a5:37:5b:b5:
                    ac:ba:0d:f0:86:40:85:4f:8d:04:d1:ce:fa:97:42:
                    95:af:97:e9:f0:33:98:35:3a:f0:9a:0b:e9:f8:81:
                    b8:ad:eb:9f:82:f4:9c:b6:1c:07:3b:e8:0b:a4:0b:
                    86:62:3c:b8:da:ed:a8:df:7e:b7:b5:03:9b:3f:ff:
                    3b:b9:76:c6:b8:19:45:91:7d:aa:fd:98:c7:f6:52:
                    ed:9c:97:00:24:ee:2c:55:7f:39:cd:d5:fb:7d:71:
                    cb:05:f0:21:66:24:0e:69:a4:eb:4c:de:dc:fe:aa:
                    61:b3:21:74:82:55:a7:7b:91:35:be:16:ab:34:8e:
                    49:19:16:c2:21:28:4b:a3:d6:97:9e:67:f6:64:06:
                    9e:8c:24:8c:a3:ed:d2:19:05:87:f1:80:b1:3d:39:
                    a0:7d:9a:03:ee:d3:75:b3:26:19:44:ff:21:95:82:
                    1a:2f:0d:1b:3b:a5:6c:b8:75:25:8e:54:5d:b8:5c:
                    0f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7A:61:10:63:33:AC:32:9B:C0:22:F6:10:52:A8:5C:7F:19:02:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8dfb7811-cc82-34ed-a196-4adb3dce261c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:07:4e:8d:f8:7e:18:e0:fa:5c:dd:a4:a7:06:52:d2:7a:99:
         67:86:94:71:a8:db:ac:33:9a:9d:be:15:26:e1:18:c0:2d:e6:
         50:39:0a:8c:a8:d9:93:1e:e5:3e:da:77:f4:8a:65:06:2f:c5:
         69:88:e3:e8:cf:36:a2:16:8a:73:3b:c0:6a:5f:10:8c:f2:60:
         f6:06:ea:42:fa:cd:49:51:0e:9d:0b:ca:95:5a:eb:01:0a:5b:
         a0:21:b0:d6:c2:42:93:ad:07:ae:b3:f3:9d:e5:f1:11:cd:8e:
         f0:b6:0f:f3:1c:82:ba:88:dd:34:c7:83:a1:30:11:a4:16:48:
         e4:0a:d9:d9:9f:74:3e:87:f4:b2:76:e0:97:d2:e2:ee:c7:1b:
         1f:37:14:2d:ce:e1:2f:60:28:7a:5f:1c:ac:e5:4d:8e:41:d6:
         ce:da:02:68:aa:ca:99:2a:d2:bc:39:48:29:5f:2d:43:71:98:
         48:d5:9d:af:d6:cf:63:7f:76:f7:f2:80:64:b3:99:8c:8c:f6:
         f6:6e:b7:fe:88:8f:ba:fd:93:03:d0:f7:8e:ae:4d:de:60:18:
         36:d0:d1:75:1e:36:fe:0a:30:54:88:3f:7d:17:18:c2:19:47:
         dc:b6:4b:81:4e:4e:69:d2:45:fb:62:ea:c5:ff:1a:64:42:a9:
         6c:ec:fb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:29:12 2026 by rpki-client